Latest revision as of 14:08, 11 July 2008

*** Time shown in EST
15:02 < mmcgrath> Alrighty guys, ready to get started? Who's here?
15:02 < f13> mmcgrath: I am
15:02 < lyz> hi
15:02 < jwatson> <-- here
15:02 < iWolf> I'm here.
15:02 < mmcgrath> Hello everyone
15:02 < mmcgrath> dgilmore: around?
15:02 < mmcgrath> abadger1999: ?
15:03 < mmcgrath> we'll get to it.
15:03 < abadger1999> here now.
15:03 < mmcgrath> howdy!
15:03 < mmcgrath> has any progress been made on the Package database?
15:04 < abadger1999> No. I've been trying to work on the bzr vcs stuff and keep uptodate with dist-hg
15:04 < mmcgrath> Awesome, thats the priority right now anyway
15:04 < mmcgrath> f13, abadger1999: what do you two have to report?
15:04 < f13> nothing much new on dist-hg, other than its sitting there, ready for people to test.
15:05 < f13> Ray Strode from Red Hat asked for an account, I don't know if he did anything with it.
15:05 * paulobanon is sort of around
15:05 < f13> next week I have the cabal summit, and after that I"ll work on dist-git
15:05 < f13> this week and been all pungi all the time.
15:05 < mmcgrath> hurray pungi
15:05 < abadger1999> f13: Is dist-hg hooked into a chroot with access granted by fedora-accounts?
15:06 < f13> abadger1999: no. accounts are local ot the box, and there is one shared plague account/cert
15:06 < f13> its very standalone
15:06 < abadger1999> I've been working out how that is done for cvs and applying it to bzr.
15:06 < f13> fedora-accounts just sends out ssh keys everywhere right?
15:06 < abadger1999> Pretty much.
15:07 < f13> k, thats how I'm using it, ssh keys
15:07 < mmcgrath> f13: yeah, it also properly distributes groups.
15:07 < f13> and using the 'fedora' group rather than say 'cvsextras'
15:07 < abadger1999> The only twist is creating a second set of ssh keys/passwd file for the chroot.
15:07 < f13> mmcgrath: nod, I figured it was a gropu and sshkey thing.
15:07 < f13> 'for the chroot' ?
15:08 < abadger1999> We put cvs, git, and mercurial on the cvs server into chroots.
15:08 < f13> ok...
15:09 < mmcgrath> I have a 'testgroup' if you want to use it sometime
15:09 < f13> abadger1999: do you have more details forthcoming?
15:09 < abadger1999> I'm still applying it to bzr and seeing what I break.
15:10 < abadger1999> f13: How about I write it up on the wiki after I get it working?
15:10 < f13> I suppose, I'm not seeing where this second set of keys plays in
15:11 < abadger1999> One set is in the main filesystem for admins to log into the box. The second set is in the chroot for people who access the repository.
15:11 < mmcgrath> Ok, we'll go back to VCS later if thats ok owith you guys. There's not to much else to talk about.
15:11 < mmcgrath> ?
15:11 < f13> mmcgrath: sure.
15:11 < abadger1999> Fine here. f13 can catch me after the meeting.
15:12 < mmcgrath> k, iWolf: I'm going to contact Stacy soon about switching out proxy[3-4] with our new dells.
15:12 < mmcgrath> You'll have your db server in no time ;-)
15:12 < iWolf> mmcgrath: sounds good!
15:12 < mmcgrath> lmacken can't make it today.
15:12 < mmcgrath> dgilmore: is the legacy stuff done as far as you know?
15:12 < mmcgrath> f13: I guess you could answer that too?
15:13 < f13> yes, the holdup is now me, and an update tool
15:13 < mmcgrath> k.
15:13 < f13> the builders can build legacy stuff, it's a matter of where to push them, so push scripts.
15:13 < mmcgrath> <nod>
15:14 < mmcgrath> So the config management stuff...
15:15 < paulobanon> gimme 5 10mins and i'll update on the proxystuff
15:15 < mmcgrath> paulobanon: k.
15:15 < mmcgrath> So I've had a chance to evaluate glump (the config management stuff that Duke uses)
15:15 < mmcgrath> Its pretty modular in design so its easy to add stuff too.
15:16 < mmcgrath> Its basically a couple of scripts, you run it regularly and pipe it through bash.
15:16 < mmcgrath> I'll send more info to the list so others can try it.
15:16 < iWolf> mmcgrath: So it looks promising?
15:16 < mmcgrath> I've had a few people contact me and who are working on the new mirror system and a few other things.
15:16 < mmcgrath> iWolf: yeah it does.
15:17 < mmcgrath> There's not much it couldn't do.
15:17 < mmcgrath> Its pretty simple in design which is good but there is a slight learning curve.
15:17 < iWolf> mmcgrath: cool, look forward to the post to the list to see more!
15:18 < mmcgrath> Just real quick. Could everyone here verify they can access the wiki?
15:19 < mmcgrath> Other than that paulobanon and kim0 have been working on the whole proxy server caching the wiki + wiki update from 1.3 to 1.5 thing.
15:19 < mmcgrath> paulobanon: back yet?
15:19 < iWolf> mmcgrath: the main page came up for me, links to marketing and infra are timing out.
15:19 < f13> mmcgrath: wiki responds to me
15:20 < abadger1999> I can get it but it seems slow.
15:20 < mmcgrath> hmm
15:20 < abadger1999> Not sure if it's me or the wiki.
15:20 < f13> images aren't loading
15:20 < f13> oh there it goes, just very slow
15:20 < lyz> same here
15:20 < skvidal> strange wiki?
15:21 < mmcgrath> skvidal: i just had a timeout myself, followed by a refresh that came right up
15:21 < skvidal> 15:20:59 up 16 days, 7:46, 1 user, load average: 1.15, 1.11, 1.18 on fpserv
15:21 < mmcgrath> Ok, so aside from the VCS and stuff paulo will get to in a few minutes. Anyone have anything else to discuss?
15:22 < abadger1999> I have a different VCS thing.
15:22 < mmcgrath> abadger1999: ok?
15:22 < abadger1999> John Kraal has been contacting me about wanting to test darcs and svk.
15:22 < mmcgrath> skvidal: time wget http://fedoraproject.org/awstats/stats/
15:22 < mmcgrath> real 0m21.137s
15:22 < mmcgrath> :(
15:23 < skvidal> the machine has no load to speak of
15:23 < f13> abadger1999: cool, more options.
15:23 -!- craigt [n=cthomas@static-68-236-219-35.nwrk.east.verizon.net] has quit ["Leaving"]
15:23 < mmcgrath> abadger1999: who's John Kraal?
15:23 < abadger1999> geonetix?
15:24 < abadger1999> He's one of the people that answered our last request for volunteers.
15:24 < mmcgrath> got'cha.
15:24 < mmcgrath> Has he added his thoughts to the wiki?
15:24 < abadger1999> not yet.
15:24 < f13> he should probably do that, and do some local testing before doing anything w/ a xen box
15:24 < mmcgrath> if he has a solid test plan and he knows those solutions don't have blockers I'd say go ahead.
15:24 < abadger1999> Sounds good.
15:24 < mmcgrath> f13: yeah.
15:25 < abadger1999> Do we want to consider darcs at all?
15:25 < abadger1999> Because of patch commutation?
15:25 < mmcgrath> the first time I had ever heard of dracs was earlier today...
15:25 < mmcgrath> [14:22:41] <abadger1999> John Kraal has been contacting me about wanting to test darcs and svk. <---- Then
15:25 < abadger1999> mmcgrath ;-)
15:25 < mmcgrath> :)
15:26 < abadger1999> darcs allows you to take out old patches, reorder the order they're applied in and other neat things.
15:26 < f13> so does git
15:26 < mmcgrath> skvidal: I don't know if its the machine or not. I'm having repeated long connection times to port 80.
15:26 < f13> git has a patchstack for that
15:26 < abadger1999> But that also means you don't have a concrete history like any other VCS
15:26 < f13> and hg has an Mq for that.
15:26 < skvidal> it might be a network issue upstream
15:26 < mmcgrath> could be.
15:26 < skvidal> but I've got nothing here that shows anything
15:26 < skvidal> and connections from my machine at home work fine
15:27 < abadger1999> f13: I haven't used darcs yet, but my impression is it's unique to darcs.
15:27 < abadger1999> It really allows you to change the history of a file.
15:27 < mmcgrath> time echo | nc fpserv.fedoraproject.org 80^Pr^Pn^Pr^Pnreal 0m21.090s
15:27 < mmcgrath> Strange, almost exactly 21 seconds every time it hangs.
15:27 < f13> abadger1999: I don't know how useful that would actually be for a package cvs
15:27 * skvidal smells transparent proxy
15:28 < abadger1999> f13: I think it would be a liability.
15:28 < skvidal> if I turn off the iptables does it get better?
15:28 < skvidal> try now
15:28 < iWolf> skvidal: working better for me now....
15:29 < iWolf> much snappier
15:29 < jwatson> real 0m0.366s
15:29 < abadger1999> I think part of our use of revision control is to be able to go back and pull a specific revision. Darcs apparently makes it so you can't always get that particular revision back out.
15:29 < skvidal> then it is the multiple connections controls
15:29 < abadger1999> (in terms of what the files were at that time.)
15:30 < skvidal> iWolf: okay, try now
15:31 < iWolf> skvidal: still working well.
15:31 < skvidal> not sure that did anything, but okay
15:31 < mmcgrath> skvidal: I'm more responsive as well
15:31 < mmcgrath> And can get there from home again
15:31 < skvidal> I disabled the connection throttling
15:31 < mmcgrath> paulobanon: back?
15:32 < skvidal> but that only affects port 80
15:32 < jwatson> time lynx -dump fpserv.fedoraproject.org == real 0m0.898s
15:32 < skvidal> not 22
15:32 < abadger1999> Anyhow, I can tell him to go ahead and write up svk and I'll do a little more exploration of darcs before telling him that's going to be okay as well.
15:32 < f13> abadger1999: that sounds less than useful of a SCM no matter what the project.
15:32 < mdomsch> dgilmore, -devel buildroots not working quite right
15:32 < mdomsch> http://fedoraproject.org/buildgroups/development/i386/repodata/primary.xml.gz: [Errno 12] Timeout: <urlopen error timed out> Trying other mirror.
15:32 < mdomsch> Error: failure: repodata/primary.xml.gz from groups: [Errno 256] No more mirrors to try.
15:33 * paulobanon is back now
15:33 < paulobanon> i asked 5 10mins to be here
15:33 < mmcgrath> ok, paulobanon: give us an update
15:33 < mmcgrath> ;-)
15:33 < paulobanon> ok kim0 and i are playing with webtest.fedora.redhat.com
15:34 < paulobanon> basicly we are configuring apache + squid on the proxies
15:34 < abadger1999> f13: It seems to make managing changes between multiple developers easier... which is one of the aspects of an SCM, but not the one I value the most.
15:34 < paulobanon> right now, apache is setup and squid is kind of ready on proxy1
15:34 < paulobanon> just need to deploy it to the other proxies
15:35 < mmcgrath> paulobanon: there's acopy of the current wiki in your home dir.
15:35 < paulobanon> mmcgrath: app1 ?
15:35 < mmcgrath> yep
15:35 < paulobanon> :d nice
15:35 < paulobanon> im testing something we used back at VFUK
15:35 < abadger1999> f13: He'd also like to get some data to start testing with.
15:35 < abadger1999> f13: How did you populate dist-hg?
15:36 < f13> abadger1999: its on my wiki page
15:36 < paulobanon> a 'switch' that we can use to change the proxies from 'normal' to static or unavailable
15:36 < f13> under the Converstion section
15:36 < mmcgrath> paulobanon: awesome. Good work. That'll be a big help to our infrastructure.
15:36 < paulobanon> basicly you just need to touch a file in a particular dir
15:36 < mmcgrath> In the interest of a short meeting, does anyone have anything else besides the VCS?
15:36 < mmcgrath> if not we'll get back to it.
15:36 < jwatson> I've been working on getting an fc3 installation done so that I can fix the extras nagios-plugins build on fc3
15:37 < abadger1999> It says you pulled a copy from backup.
15:37 < jwatson> does fc3 work well as a xen guest?
15:37 < mmcgrath> jwatson: thanks for that by the way. You could also use CentOS 4.
15:37 < mmcgrath> jwatson: not without some tweaking.
15:37 < jwatson> how about centos?
15:37 < abadger1999> I'm afraid I'm too new to know where to find that.
15:37 < mmcgrath> CentOS4 would also work since thats our real target.
15:37 < mmcgrath> RHEL4/CentOS4.
15:38 < jwatson> would a centos4 install inside a chroot with an FC6 kernel be ok for building?
15:39 < jwatson> now that I say that, it it sounds like a bad idea :)
15:39 < mmcgrath> jwatson: for building? Should be. We'll just be using mock.
15:39 < jwatson> Ok, I'll figure out one or the other
15:40 < mmcgrath> awesome
15:40 < mmcgrath> Anyone have anything else?
15:40 < f13> abadger1999: ah, I got a 'copy from backup' from mmcgrath
15:41 < paulobanon> later today i'll have webtest.f.rh.c/hitbox going to fp.o like apache->squid->fpserv
15:41 < mmcgrath> paulobanon: awesome.
15:41 < abadger1999> f13: k. thx
15:41 < paulobanon> only working on proxy1 atm
15:42 < mmcgrath> If no one has anything else. f13 abadger1999: do you want your VCS discussion on record or after the meeting?
15:42 < abadger1999> mmcgrath: How do I get a copy of the cvs tree for importing?
15:42 < f13> mmcgrath: I have no preference
15:42 < paulobanon> (im out again, i'll read the meeting log later)
15:42 < abadger1999> mmcgrath: If it's on record, I can point John Kraal to it.
15:42 < mmcgrath> abadger1999: send me an email of what you want and where and I'll just make it happen ;-)
15:43 < abadger1999> mmcgrath: Cool.
15:43 < mmcgrath> k, you guys continue. Let me know when your done and I'll call th emeeting ;-)
15:43 < mmcgrath> or you guys can call it.
15:45 < quaid> mmcgrath: are we going to be able to resolve the (AIUI) Python version for Plone on EL 4?
15:46 < mmcgrath> quaid: yeah. That shouldn't be a problem. WE've discussed a couple of options but we're pretty sure RHEL5 wil be out by the time plone is ready ;-)
15:46 < warren> Oops, did meeting begin at 3?
15:46 < mmcgrath> warren: yeah.
15:47 < abadger1999> f13: Right. So the chroot. The current cvs server binds: /usr/sbin/chroot [REPO] /usr/sbin/sshd -i to the various public hostnames.
15:47 < warren> sorry, I thought we adjusted it with the timezone shift like FESCO
15:47 < mmcgrath> ;-)
15:47 * warren tugged in too many directions
15:47 < abadger1999> One for git, one for cvs
15:48 < warren> BTW, need any further network changes?
15:49 < warren> I think test[1-9] and publictest[1-9] should provide sufficient flexibility, as long as we are adequately protecting port 22 on publictest.
15:49 < warren> I saw some logwatch reports where people began attacking port 22 on publictest
15:49 < mmcgrath> we should enforce iptables on the xen dom0 hosts
15:50 -!- craigt [n=cthomas@static-68-236-219-35.nwrk.east.verizon.net] has joined #fedora-admin
15:51 < f13> abadger1999: ok...
15:54 < abadger1999> [REPO] is the chroot and has a passwd file, the ssh keys of everyone allowed to access that service, the programs necessary for accessing it, and the repo data itself.
15:55 < abadger1999> f13: It should be pretty easy for you to integrate the scripts that are there with hg-dist as we're already hosting an hg server there.
15:57 -!- glezos [n=glezos@fedora/glezos] has joined #fedora-admin
15:58 < f13> but that hg server is more for source projects, not necessarily package dist right?
15:58 < f13> or does it matter?
15:59 < f13> Actually I'm failing to see what I would need to change in my setup, other than perhaps paths
15:59 < mmcgrath> alright, this is going to go on forever. Mind if we call the meeting?
16:00 < mmcgrath> or not its up to you. Ijust want to make sure the logs make it onto the wiki whenever it does end.
16:00 < glezos> hi all.
16:00 < abadger1999> mmcgrath: Go ahead.
16:01 < mmcgrath> k
16:01 < mmcgrath> --------------- Meeting End ----------------

Red Hat, Red Hat Enterprise Linux, the Shadowman logo, and JBoss are trademarks or registered trademarks of
Red Hat, Inc. or its subsidiaries in the United States and other countries.
Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.
The Fedora Project is maintained and driven by the community and sponsored by Red Hat. This is a community
maintained site. Red Hat is not responsible for content.